Bootstrappableのソースを表示

[[Category:セキュリティ]]
[https://bootstrappable.org/ Bootstrappable Builds] allows us to bootstrap Arch Linux easily from scratch using a minimal set of binaries. Allowing a minimal set of binaries to be audited and together with reproducible builds provide confidence that you are running the code which you expect to run.

== Bootstrapping Arch Linux ==

[https://www.gnu.org/software/mes/ Mes] is a project which can be utilised to bootstrap Arch Linux from a minimal set of (32bit) binaries having the rest of the system compiled from source code. For Arch Linux we can start bootstrapping a C compiler from mes and later reduce the initial bootstrap binaries to a minimal auditable amount.

The roadmap to bootstrapping [[GCC]]:

* Bring Mes into the repository
* Compile Mes with Mes (and compare it with other distributions Debian, Guix, NixOS)
  MES=mes AR=mesar CC=mescc ./configure.sh --host=i686-unknown-linux-gnu
  V=2 MES=mes AR=mesar GUILE_LOAD_PATH=/usr/share/mes/module/ ./bootstrap.sh
* Compile a [https://gitlab.com/janneke/tinycc/tree/mes-0.21 patched tcc-boot0]
* Compile a tcc-boot with a tiny [https://git.savannah.gnu.org/cgit/guix.git/tree/gnu/packages/patches/tcc-boot-0.9.27.patch patch]
* System utilities
* GCC-2.95.3 (GCC 4.0.4 can also be bootstrapped directly from TCC if musl libc is built first)

More information:
* https://git.savannah.gnu.org/cgit/guix.git/tree/gnu/packages/commencement.scm
* https://guix.gnu.org/blog/2019/guix-reduces-bootstrap-seed-by-50/
* https://github.com/fosslinux/live-bootstrap/blob/master/parts.rst

== Bootstrapping Languages ==

For languages which are self-hoisting (require itself to build a new version) we want a path from a C compiler to for example Rust.

=== Rust ===

There is a Rust C++ implementation which can compile Rust 1.19.0 called [https://github.com/thepowersgang/mrustc mrustc]. Guix has more information in this [https://guix.gnu.org/blog/2018/bootstrapping-rust/ blog post].

=== Java (openjdk) ===

A path to bootstrapping JDK is described [https://bootstrappable.org/projects/java.html here]